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Introduction 

The  need  to  represent  information  about  who  knows  what  in  intelligence  computer  programs  was 
the  original  motivation  for  this  work.  For  example,  a program  that  plans  trips  must  know  that 
travel  agents  know  who  knows  the  availability  of  rooms  in  hotels.  An  early  problem  is  how  to 
represent  what  people  know  about  other  people’s  knowledge  of  facts,  and  even  the  knowledge  of 
propositions  treated  in  this  paper  presented  some  problems  that  were  not  treated  in  previous 
literature 

We  started  with  the  following  well  known  puzzle  of  the  three  wise  men:  A king  wishing  to  know 
which  of  his  three  wise  men  is  the  wisest,  paints  a white  spot  on  each  of  their  foreheads,  tells  them 
at  least  one  spot  is  white,  and  asks  each  to  determine  the  color  of  his  spot.  After  a while  the 
smartest  announces  that  his  spot  is  white  reasoning  as  follows : "Suppose  my  spot  were  black.  The 
second  wisest  of  us  would  then  see  a black  and  a white  and  would  reason  that  if  his  spot  were  black , 
the  dumbest  would  see  two  black  spots  and  would  conclude  that  his  spot  is  white  on  the  basis  of  the 
king's  assurance.  He  would  have  announced  it  by  now,  so  my  spot  must  be  white.” 

In  formalizing  the  puzzle,  we  don't  wish  to  try  to  formalize  the  reasoning  about  how  fast  other 
people  reason.  Therefore,  we  will  imagine  that  either  the  king  asks  the  wise  men  in  sequence 
whether  they  know  the  colors  of  their  spots  or  that  he  asks  synchronously,  "Do  you  know  the  color 
of  your  spot"  getting  a chorus  of  noes.  He  asks  it  again  with  the  same  result,  but  on  the  third 
asking,  they  answer  that  their  spots  are  white.  Needless  to  say,  we  are  also  not  formalizing  any 
notion  of  relative  wisdom. 

We  start  with  a general  set  of  axioms  for  knowledge  based  on  the  notation,  axioms,  and  inference 
rules  of  propositional  calculus  supplemented  by  the  notation  S*p  standing  for,  "Person  S knows 
proposition  p"  Thus  5 3*S 2* ^ (5 j */) j ) can  stand  for,  "The  third  wise  man  knows  that  the  second 

wise  man  knows  that  the  first  wise  man  does  not  know  that  the  first  wise  man’s  spot  is  white”. 

We  use  axiom  schemata  with  subscripted  S’s  as  person  variables,  subscripted  p’s  and  q’s  as 
propositional  variables,  and  a special  person  constant  called  "any  fool"  and  denoted  by  0 It  is 
convenient  to  introduce  "any  fool"  because  whatever  he  knows,  everyone  knows  that  everyone  else 
knows.  "Any  fool”  is  especially  useful  when  an  event  occurs  in  front  of  all  the  knowers,  and  we 
need  sentences  like,  "5 1 knows  that  Sg  knows  that  S3  knows  etc.".  Here  are  the  schemata: 

K 0:  S*ps>p-,  What  a person  knows  is  true. 

K\ : 0 *(S*p?p)-,  Any  fool  knows  that  what  a person  knows  is  true. 

K2:  0*(Q*ps>0*S*p},  What  any  fool  knows,  any  fool  knows  everyone  knows,  and  any  fool  knows 
that. 

K 3:  0*(S*p/\S*(p^q)^S*q)\  Any  fool  knows  everyone  can  do  modus  ponens. 

There  are  two  optional  schemata  Ki  and  Kb: 

K4.  0 *(Sxp3S*S*p)-,  Any  fool  knows  that  what  someone  knows,  he  knows  he  knows. 

Kb:  0 *(iS*p=S*nS*p);  Any  fool  knows  that  what  some  doesn’t  know  he  knows  he  doesn’t  know. 
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If  there  is  only  one  person  5,  the  system  Is  equivalent  to  a system  of  modal  logic.  Axioms  K \-K$ 
give  a system  equivalent  to  what  Hughes  and  Cresswell  [1]  called  T,  and  Ki  and  Kb  give  the 
modal  systems  S 4 and  55  respectively.  We  call  K 4 and  K5  the  introspective  schemata. 

It  is  convenient  to  write  Stp  as  an  abbreviation  for  S*pvS*~\p-,  it  may  be  read  "5  knows  whether 

P"- 

On  the  basis  of  these  schemata  we  may  axiomatize  the  wise  man  problem  as  follows: 

CO:  P\/\P2r'P% 

Cl:  Q*{p\vp2'jp,>) 

C2:  0*(5  |jp2A,S  | 8/>3a52$P  i 3!^)  aS  38^2) 

C2:  0*(52«5|*p|) 

C3:  0*(5 3852*^2) 

C4:  -i5|8p| 

C5:  i S<£ip<£ 

From  KO-KZ  and  CI-C5  it  is  possible  to  prove  53*^3.  CO  is  not  used  in  the  proof.  In  some 

sense  C4  and  C5  should  not  be  required.  Looking  at  the  problem  sequentially,  it  should  follow 
that  5 1 does  not  know  p \ initially,  and  that  even  knowing  that,  52  doesn’t  know  p2_ 

In  order  to  proceed  further  with  the  problem,  model  theoretic  semantics  is  necessary.  In  what 
follows,  however,  we  will  deal  with  the  puzzle  of  unfaithful  wives  (cf.  $4)  rather  than  that  of  three 
wise  men,  because  the  latter  may  be  considered  as  a simplified  version  of  the  former.  To  do  so  we 
must  extend  the  system  Kb  to  KTb  In  which  one  can  treat  the  notion  of  time  as  well.  We  will  use 
slightly  different  notations  in  the  following  sections  since  they  are  convenient  to  denote  time  and 
have  similarity  to  those  used  in  ordiary  modal  logics. 

We  briefly  describe  the  Hilbert-type  formulation  of  the  system  KTb  in  §2,  and  its  model  theory  in 
§3.  Finally,  we  will  sketch  the  outline  of  the  solution  to  the  puzzle  of  unfaithful  wives  in  this 
formalism  in  §4.  The  reader  is  referred  to  Sato  [2]  for  details. 

The  Formal  Systems 


Basic  Language 

The  basic  language  L is  a triple  (Pr,  Sp,  N+),  where 

Pr  * p\,  p2>  < 

Sp  - 50,  5|,  ...  ; 

N+-I,  2,  ... 
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are  denumerable  sequence  of  distinct  symbols.  N+  is  the  set  of  numerals  denoting  the 
corresponding  positive  integers.  S0  c Sp  will  be  denoted  by  0 and  will  called  any  fool. 


Languages 

A language  L is  a triple  (Pr,  Sp,  T),  where 

Pr  c Pr ! 

Sp  c Sp  i 

r cn(. 

Elements  in  Pr,  Sp  and  T denote  propositional  variables,  persons  and  time,  respectively.  Our 
arguments  henceforth  will,  unless  stated  otherwise,  always  be  relative  to  a language  L. 


Well  formed  formulas 

The  set  of  well  formed  formulas  is  defined  to  be  the  least  set  Wff  such  that: 


(Wl)  leW//, 

(W 2)  Pr  c Wff  , 

(W3)  a,  (3  e Wff  implies  =>a(3  e Wff  , 

(W4)  S eSp,  t eT,  a*  W//implies  Sta  e Wff  . 

The  symbols  1 and  3 denote  false  and  Implication,  respectively. 

We  will  make  use  of  the  following  abbreviations: 


a3(3  - 30(3 
10  - 03 1 

T - nl 
ov(3  - na3(3 
OA(3  - 3(033(3) 

[S(]o  - Sfo 

<St> a - 3[Jfj3a 
{Sf}a  - [Si]av[Si]3a 


read  "o  implies  (3" 

read  "not  a" 

read  "true" 

read  "a  or  0" 

read  "a  and  (3" 

read  "S  knows  a at  time  f" 

(This  corresponds  to  * in  5 1 •) 
read  "a  is  possible  for  S at  time  t“ 
read  "S  knows  whether  a at  time  t " 
(This  corresponds  to  8 in  §1.) 


For  any  o € Wff,  we  define  Sub(o)  c Wff  inductively  as  follows: 

(51)  a € Pr  u {1}  ”>  Sub(o)  ■ {o}, 

(52)  a - 0 3 y ->  Sub(a)  - {a}  u Sub{0)  u Sub(y), 

(53)  a - [St)0  ->  Sub( a)  u Sukt 3). 

We  say  0 is  a subformula  of  o if  0 e Sub(o). 
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Hilbert-type  system 

We  now  define  the  modal  system  KT5.  The  axiom  schemata  for  KT5  are  as  follows: 

(A\)  nopa 
( A2 ) a^ifloa) 

(A 3)  (a=((33T))  p ((as(3)  o (op?/) 

( Ai ) [St3coa 

(v45)  [Or  3a  = [Gf3tS*3a 

<>46)  [SfXa3^)  3 (tSu3a3[Su]0),  where  tsu 

(A 7)  -i[5*3a  = [5*3  i [5*]a 

We  have  the  following  two  inference  rules: 

(PI)  a as(3 

(modus  ponens) 

a 

( R2 ) a 

<[5r}— necessitation) 

[Sfja 

We  write  h a if  there  exists  a proof  of  a.  For  any  T c Wff  we  write  F h <x  if  h (3j  p ((3*>3(  . . . 
(0m3a)  ...  ))  for  some  (31 , . . . , (3m  € F.  T is  said  to  be  consistent  if  V Y- 1 


Kripkc-type  Semantics 


Definition  of  Kripke-type  models 

Let  W be  any  non-empty  set  (of  possible  worlds).  A model  M on  W is  a triple 
<W ; r.  v>  , 


where 

r.SpxT -»  2W  * w 

and 

v.  Pru  {1}  > 2W. 

Given  any  model  M , wc  define  a relation  *=  g W x Wff  as  follows: 

(£1)  a e Pr  u {1}  •>  to  *=  a iff  to  € v(a), 

(£2)  a - (3  3 V ->  to  t=  iff  not  to  t=  (3  or  to  >=  t, 

(£3)  a - [5*3(3  ->  to  *=  iff  for  all  to'  e W such  that 

(to,  to')  e r(5,  t),  to'  *=  (3. 


We  will  write  "to  t=  a (in  Af )"  if  we  wish  to  make  M explicit.  A formula  a is  said  to  be  valid  in 
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M,  denoted  by  Mm,  if  w •=  a for  all  w c M.  (By  w € M,  we  mean  w e W .)  Furthermore,  we 
will  employ  the  following  notation: 

w r (read  "w  realizes  P)  <//  w*  « for  all  a € T 

A model  M is  a KT5-model  if 

(Ml)  r(l)-0, 

(M2)  r(0,  /)  2 r(S,  r)  for  any  5 e and  f e T, 

(M3)  r(S,  u)  2 r(S,  r)  for  any  5 e and  u,  t e T such  that  ust, 

(AH)  r( 5,  f)  is  an  equivalence  relation  for  any  5 € Sp  and  t € T. 

A set  T of  well  formed  formulas  is  said  to  be  rtaliiable  If  there  exists  a KT-5  model  M and  w € 

M such  that  ut  ^ T. 


Soundness  of  KT5-models 

We  now  wish  to  show  that  each  formula  provable  in  KT5  is  valid  in  any  KT5-model. 

Theorem  I.  (Soundness  Theorem)  If  H a then  M >=  a for  any  K T5-model  M. 

Corollary  2.  (Consistency  of  KT5)  1 Is  not  provable  in  KT5. 

Completeness  of  KT5-models 

As  for  the  completeness  of  KT5-models,  we  have  the  following  theorems. 

Theorem  3.  (Generalized  Completeness  Theorem)  Any  consistent  set  of  well  formed  formulas  is 
realizable. 

Theorem  4.  (Completeness  and  Decidability  Theorem)  For  any  a e Wff,  a is  a theorem  of  KT5 
if  and  only  if  a is  valid  in  all  KT5-mo<?els  whose  cardinality  s2n  , where  n is  the  cardinality  of 
the  finite  set  Sub  (a)  u {i}. 

The  Puzzle  of  Unfaithful  Wives 

We  begin  by  explaining  the  notions  of  knowledge  base  and  knowledge  set,  which  are  fundamental 
for  our  formalization  of  the  puzzle  of  unfaithful  wives. 

Knowledge  set  and  knowledge  base 

Let  L be  any  language.  We  will  make  the  notion  of  the  totality  of  one’s  knowledge  explicit  by  the 
following  definitions: 

Definition.  K c Wff  is  a knowledge  set  for  Si  If  K satisfies  the  following  conditions: 

(KS I)  K is  consistent. 
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(KS 2)  K - [Jt]X,  where  X - {a|A:  (-  «}. 

(K53)  If  Af  h t5r]a|  v . . . v[Jr]a„  then  K I-  cty  for  some  I (1  s i s n). 

Definition.  B q Wff  is  a knowledge  base  for  St  if  B satisfies  the  following  conditions: 

(KB  1)  B is  consistent. 

(KB2)  B c [JOB,  where  B - {ajfl  I-  a}, 

(KB3)  If  B h [Jf]a|  v ...  v [Jf]an  then  fl  h for  some  1(1  s i s n). 

By  (KS2)  (or  ( KB2 ))  we  see  that  any  element  in  K (or  B,  resp.)  has  the  form  [5<]a.  It  is  easy  to 
see  that  if  B is  a knowledge  base  for  St  then  [SOB  is  a knowledge  set  for  St. 

Let  F c Wff  be  consistent.  We  compare  the  following  three  conditions. 

(1)  If  T V-  a then  T h i[J/]a. 

(2)  If  T h [JOa,  v ...  v [J/]an  then  T H for  some  I (I  sisn). 

(3)  If  T h {St]a  then  F h « or  T (-  na. 

Then  we  have  the  following 
Lemma  5.  (1),  (2)  and  (3)  are  equivalent. 

We  now  *tiidy  the  semantical  characterization  of  knowledge  sets.  Let  M - <W-  r,  v>  be  any 
KT5-model.  For  any  tu  e W and  (5,  t)  zSp  xT,  we  define  Kw(St)  c Wff  by. 

Kw(St)  - [iSth  | w t=  [Jf]aJ. 

Since,  as  we  will  see  below,  Kw(St)  is  a knowledge  set  for  St,  we  call  it  the  knowledge  set  for  St  at 

w. 

Lenma  6.  Kw(St)  is  a knowledge  set  for  St. 

Let  K be  a knowledge  set  for  St.  We  say  utM  characterizes  K if  K - Kw(st). 

Theorem  7.  Any  knowledge  set  is  characterizable. 


Informal  presentation  of  the  puzzle 

The  puzzle  of  unfaithful  wives  is  usually  stated  as  follows: 

There  was  a country  in  which  one  million  married  couples  inhabited.  Among  these  one  million 
wives,  40  wives  were  unfaithful  The  situation  was  that  each  husband  knew  whether  other  men’s 
wives  were  unfaithful  but  he  did  now  know  whether  his  wife  was  unfaithful.  One  day  (call  it  the 
first  day  he  King  of  the  country  publicized  the  following  decree: 
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(1)  There  is  at  least  one  unfaithful  wife. 

(ii)  Each  husband  knows  whether  other  men's  wives  are  unfaithful  or  not. 

(ill)  Every  night  (from  tonight)  each  man  must  do  his  deduction,  based  on  his 
knowledge  so  far,  and  try  to  prove  whether  his  wife  is  unfaithful  or  not. 

(iv)  Each  man,  who  ha.'  succeeded  in  proving  that  his  wife  is  unfaithful,  must  chop 
off  his  wife's  head  next  morning. 

(v)  Every  morning  each  man  must  see  whether  somebody  chops  off  his  wife’s  head. 

(vi)  Each  man’s  knowledge  before  this  decree  is  publicized  consists  only  of  the 
knowledge  about  other  men's  wive's  unfaithfulness. 

The  problem  Is  "what  will  happen  under  this  situation?"  The  answer  is  that  on  the  41st  day  40 

unfaithful  wives  will  have  their  heads  chopped  off.  We  will  treat  this  puzzle  in  a formal  manner. 


Formal  treatment  of  the  puzzle 

We  w.ll  treat  this  puzzle  by  assuming  that  there  are  * (2l)  married  couples  in  the  country.  Then 
the  language  I - ( Pr , Sp,  T)  adequate  for  this  puzzle  will  be: 

Pr‘  iP\ ?*)■ 

SP‘\0.  5, Sk}, 

T -N+. 

where  5t-  denotes  itfl  husband,  means  that  5j’s  wife  is  unfaithful  and  t e T denotes  day. 

Let  {±}*  • {+,-}*  denote  the  fe-fold  cartesian  product  of  the  vector  space  GF(2)  - {+  (-1),  - (- 
O)}  with  addition  ©.  We  define 

n : [±}k  ■—+  Wff 


k E • 

by  n(s<...tfc)  « A p ; 1 , where  e {±}  and  p\{p~{)  denotes  pi  (ip,-,  resp.).  We  put  II  - 
i-1 


k 

Image(n)  and  IIq  - Il-{  A p . We  also  use  n io  denote  arbitrary  element  in  II.  Now,  let  T 
t°  I 

denote  what  the  King  publicized  on  the  first  day,  and  fln(5/n)  (jx  1,  . . , , k)  denote  a knowledge 
base  for  S^n  under  the  situation  n - n(c/...tp  e IIq.  Let  us  put: 
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fBn(5in)  h a 1 - { 


T 

1 


if  Bn(Stn) Ha 
othtrwist 


and 


\BnQp)  t-  a 1 - { 


T 

1 


ifB^Stfhx 

othtrwist 


where  a c Wff.  We  also  put  (*)  - {I *}.  Then,  as  a formalization  of  the  puzzle,  we 

postulate  the  following  identities: 


Bn(S1l)-[J1l]r  u [Jjltyji  ^ l,j  €(*)},  where  tk)  Eq(n,l,l) 

B^n+lMJ^i+IJB^n)  u {[Sjn+iXSjnty  | fln(5jn)  I-  P,,j  c (*)} 

utfS^+Un  [Sjn)pj  | fln(5j«)  ¥■  pj,J  € (k)]  Eq(n,i,n+l) 

k 

V - {[01]V  P ,)u{[01]{5jl}^j  I j * i,  l 6 (*),  j € (*)) 

•jjtOlXn  a (|'Bn(5in)  H ^ 3 [On+lXSjn]/^))  | n n IIq,  i € (*),  n e T] 

u{[0lXn  a (fBn(5jn)  H pf]  o [On+lHfyilft))  | n € IIq,  i e (*),  n € T] 

uJtOlXrBn^n)  h a]  3 [OiXn  3 [S^nja))  | n e no,  t e (*),  a e Wff]  Eq(*) 

Since  the  meta-notions  such  as  knowledge  base  and  provability  ((-)  cannot  be  expressed  directly  in 
our  language,  we  were  forced  to  interpret  the  King’s  decree  into  T in  a somewhat  indirect  fashion. 

Now,  if  we  read  E<f*)  as  the  definition  of  I\  then  we  find  that  the  definition  is  circular,  since  in 
order  that  T may  be  definable  by  Etf*)  it  is  necessary  that  Bn(Sj7i)  are  already  defined,  whereas 

BjfSin)  are  defined  in  terms  of  T in  Eqs(n,  l,  n).  So,  we  will  treat  these  equations  as  a system  ^ 
- {£a(rt,i,  n)  | n € IIq,  l € (*),  n € T]  u {£?(*)}  of  equations  with  the  unknowns  {Bn(^rt)  | n € 
n0,  l € (k),  n c Tj  and  T,  We  will  solve  under  the  following  conditions: 

(•)  For  any  n € IIq,  fu{n}  is  consistent, 


(**)  For  any  n t IIq  and  fyi,  Bn(Jjn)  is  a knowledge  base  for  S[n. 


We  think  these  conditions  are  natural  in  view  of  the  intended  meanings  of  T and  Bn(Sfn). 

Let  us  define  a norm  on  £ - {±}*  by  |jt||  - |{f  | c{  - +}|  , where  c - tj  ...  tk.  For  any  c - c( 
€ £ and  i - 1 k,  we  put 


c(+f)-  Cj  ...  t<_l  + Ei+|  ...  tk  , 

*<-0-  ci  1 rk> 
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and  for  any  n - n(c)  e II,  we  put 

n(+i)  - n(e(+f )) , 
n (-/)  - n(« <-/»  . 

We  also  put  - £-{0}  - £-{-...-}. 

We  define  a KT5-model  M - <£$  r,  u>  as  follows: 

(i)  (c,6)  c r(Sitn)iff 

(a)  t > 5 
or 

(b)  c©6  - + and  n < M+i)||  - |ft+i)||. 

•••I 

(il)  (c,6)  c r(0,n)  iff 

(c)  c - 5 
or 

(d)  n < max{||t{+0ll  1 1 c (*)}  and  n < max{||6<+i)ll  | i e (*)} . 

(iii)  c € v(Pi)  Iff  - + • 

(iv)  t>(l)  ■ 0. 

Then  we  have  the  following  theorem. 

Theorem  8.  Under  the  conditions  (•)  and  (••),  has  the  unique  solution  «£n(Sin)>,  r>,  where 
the  solution  is  characterized  by  the  condition: 

®n(t)(^<n>  0 ^ ancl  ^ly  if  t * [J/n]a  (in  M). 


Thus  we  have  seen  that  f may  be  regarded  as  the  formal  counterpart  of  the  King’s  decree  in  our 
formal  system.  The  puzzle  is  then  reduced  to  the  problem  of  showing  that: 

(£|)  If  Ml  - n and  - +,  then  Bn(tptn)  h pt  and  £n(t)(tyi-l)  V-  p(. 

We  note  that  we  can  moreover  prove  the  following: 

(P2)  If  Ml  - n and  cj  - - , then  fl^^n+l)  I-  pjind  B^t\(Stn)  V-  pj. 

It  is  clear  that  (P|)  and  (P<f)  follow  at  once  from  the  condition  stated  in  Theorem  8. 
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